Adding Digital Signature to XML strings

Hello All ,
i'm looking for functionality to add digital signature, encoding & decording to XML Payment fiels with encryption as well.i have searched on SDN but i havn't found any solution.
waiting for some useful thoughts on it.
i have see Programs SSF* as well , but it requires PSE settings which i dont want to use .Is there any others ways to do it ?
Thanks & Regards
V.

Yes, you need a certificate to sign.
You need a special one for yourself, one that also contains your private key.
Your message is signed with your private key (actually encrypted with it), after that anyone can see you signed it using your public key.
Encryption works the other way round: You encrypt it with openly available public key of the recipient, but only he will be able to decrypt it with his private key.
BTW you can create your own certificate, using Keychain Access>Certificate Assistant. The disadvantage is that they are not automatically accepted as valid, since they are not listed in the X509Anchors keychain. You have (and whoever you deal with) manually import your (public) certificate into the Keychain X509Anchors as well. Double clicking the certificate gives you the option to do so.

Similar Messages

Digital signature on xml string

Hello
I'm trying to sign an xml string, but when I do so, I receive:
HIERARCHY_REQUEST_ERR: An attempt was made to insert a node where it is not permitted.
     at com.sun.org.apache.xerces.internal.dom.CoreDocumentImpl.insertBefore(Unknown Source)
     at org.jcp.xml.dsig.internal.dom.DOMXMLSignature.marshal(Unknown Source)
     at org.jcp.xml.dsig.internal.dom.DOMXMLSignature.sign(Unknown Source)
     at com.azry.ess.service.mof.InboundMessageUtils.sign(InboundMessageUtils.java:139)
     at com.azry.ess.service.mof.Services.getPaymentString(Services.java:187)
     at com.azry.ess.service.mof.Services.main(Services.java:61)
the string looks like this:
<Object Id="PAYMENTS"><PAYMENTS xmlns=""><Payment><PaymentIdA></PaymentIdA><PaymentIdB>aa</PaymentIdB><SrcBank>bb</SrcBank><SrcAccount>cc</SrcAccount><PayerId>dd</PayerId><PayerName>Dato</PayerName><TaxPayerId>00022023</TaxPayerId><TaxPayerName></TaxPayerName><ReceiverName>mof</ReceiverName><AdditinalInfo>racxa</AdditinalInfo><Amount>521</Amount><TreasuryCode>hello</TreasuryCode><PaymentTime>hi</PaymentTime><PaymentChannel>ib</PaymentChannel></Payment></PAYMENTS></Object>
and here's the code
          XMLSignatureFactory fac = XMLSignatureFactory.getInstance("DOM");
          Reference ref = fac.newReference("", fac.newDigestMethod(DigestMethod.SHA1, null));
          CanonicalizationMethod canonicalizationMethod =
                fac.newCanonicalizationMethod(
                CanonicalizationMethod.INCLUSIVE_WITH_COMMENTS,
                (C14NMethodParameterSpec) null);
          SignatureMethod signatureMethod = fac.newSignatureMethod(
                SignatureMethod.RSA_SHA1, null);
          SignedInfo si = fac.newSignedInfo(
                canonicalizationMethod, signatureMethod,
                Collections.nCopies(1, ref));
          KeyInfoFactory kif = fac.getKeyInfoFactory();
          KeyValue kv = kif.newKeyValue(getPeerPublicKey());
          KeyInfo ki = kif.newKeyInfo(Collections.singletonList(kv));
          XMLSignature signature = fac.newXMLSignature(si, ki);
          DOMSignContext sc = new DOMSignContext(getPeerPrivateKey(), doc);
          signature.sign(sc);any ideas? :S
thanks

Thanks for the reply
I'm generating that xml using a simple StringBuilder. here's the code
          StringBuilder sb = new StringBuilder();
          sb.append("<Object Id=\"PAYMENTS\"><PAYMENTS xmlns=\"\"><Payment><PaymentIdA></PaymentIdA><PaymentIdB>");
          sb.append(paymentId);
          sb.append("</PaymentIdB><SrcBank>");
          sb.append(srcBankCode);
          sb.append("</SrcBank><SrcAccount>");
          sb.append(srcBankAccount);
          sb.append("</SrcAccount><PayerId>");
          sb.append(payerId);
          sb.append("</PayerId><PayerName>");
          sb.append(payerName);
          sb.append("</PayerName><TaxPayerId>");
          sb.append(taxPayerId);
          sb.append("</TaxPayerId><TaxPayerName>");
          sb.append("</TaxPayerName><ReceiverName>");
          sb.append(receiverName);
          sb.append("</ReceiverName><AdditinalInfo>");
          sb.append(additionalInfo);
          sb.append("</AdditinalInfo><Amount>");
          sb.append(amount);
          sb.append("</Amount><TreasuryCode>");
          sb.append(treasuryCode);
          sb.append("</TreasuryCode><PaymentTime>");
          sb.append(paymentTime);
          sb.append("</PaymentTime><PaymentChannel>");
          sb.append(paymentChannel);
          sb.append("</PaymentChannel></Payment></PAYMENTS></Object>");
          Document doc = InboundMessageUtils.parseInboundMessage(sb.toString());
          org.w3c.dom.Node n = InboundMessageUtils.sign(InboundMessageUtils.getPeerPrivateKey(), doc);
     public static Document parseInboundMessage(String message) throws Exception {
          DocumentBuilderFactory dbf = DocumentBuilderFactory.newInstance();
          dbf.setNamespaceAware(true);
          InputStream is = new ByteArrayInputStream(message.getBytes(Charset
                    .forName("UTF-8")));
          Document newDoc = dbf.newDocumentBuilder().parse(is);
          return newDoc;
     public static void sign(PrivateKey expectedKey, Document doc) throws Exception{
          XMLSignatureFactory signatureFactory = XMLSignatureFactory
                    .getInstance("DOM");
          XMLSignatureFactory fac = XMLSignatureFactory.getInstance("DOM");
          Reference ref = fac.newReference("", fac.newDigestMethod(DigestMethod.SHA1, null));
          CanonicalizationMethod canonicalizationMethod =
                fac.newCanonicalizationMethod(
                CanonicalizationMethod.INCLUSIVE_WITH_COMMENTS,
                (C14NMethodParameterSpec) null);
          SignatureMethod signatureMethod = fac.newSignatureMethod(
                SignatureMethod.RSA_SHA1, null);
          SignedInfo si = fac.newSignedInfo(
                canonicalizationMethod, signatureMethod,
                Collections.nCopies(1, ref));
          KeyInfoFactory kif = fac.getKeyInfoFactory();
          KeyValue kv = kif.newKeyValue(getPeerPublicKey());
          KeyInfo ki = kif.newKeyInfo(Collections.singletonList(kv));
          XMLSignature signature = fac.newXMLSignature(si, ki);
          DOMSignContext sc = new DOMSignContext(getPeerPrivateKey(), doc);
          signature.sign(sc);
     public static PrivateKey getPeerPrivateKey() throws Exception
          BigInteger modulus = new BigInteger(
          "SomeKey");
          BigInteger exponent = new BigInteger("65537");
          RSAPrivateKeySpec spec = new RSAPrivateKeySpec(modulus, exponent);
          PrivateKey key;
          try {
               KeyFactory kf = KeyFactory.getInstance("RSA");
               key = kf.generatePrivate(spec);
          } catch (NoSuchAlgorithmException e1) {
               throw new Exception(e1);
          } catch (InvalidKeySpecException e1) {
               throw new Exception(e1);
          return key;
     public static PublicKey getPeerPublicKey() throws Exception {
          BigInteger modulus = new BigInteger(
                    "SomeKey");
          BigInteger exponent = new BigInteger("65537");
          RSAPublicKeySpec spec = new RSAPublicKeySpec(modulus, exponent);
          PublicKey key;
          try {
               KeyFactory kf = KeyFactory.getInstance("RSA");
               key = kf.generatePublic(spec);
          } catch (NoSuchAlgorithmException e1) {
               throw new Exception(e1);
          } catch (InvalidKeySpecException e1) {
               throw new Exception(e1);
               return key;
     }Any idea? :S

How to validate XML Digital Signature with XML DB (o PL/SQL) in Oracle 11g

Hi,
Do you know if there is possibility to validate XML Digital Signature using XML DB (or PL/SQL) in Oracle 11g?
Let say I have CLOB/XMLType containing Digitally Signed XML, and I want to validate, that thsi is proper signature. I also have public key of signer (I could store it in CLOB or file or Oracle wallet).
Is it possible to do?
If there is need to install additional component - then which one?
Regards,
Paweł

Hi,
this is what i got from someone...
but the links he gave are not opening up...
u have to place a picture there and have to load the digital signatures as Jpegs on to the server to OA top
and have to refer them in the XML for dynamically get the signature on the reports
when u select the properties of the picture placed in the XML template,
there will be one tab with "URL"... in that u have to give the path for that jpegs
Pls refer the following documents for enabling digital signature on pdf documents.
http://iasdocs.us.oracle.com/iasdl/bi_ee/doc/bi.1013/e12187/T421739T481159.htm#5013638 (refer section 'Adding or Designating a Field for Digital Signature'
http://iasdocs.us.oracle.com/iasdl/bi_ee/doc/bi.1013/e12188/T421739T475591.htm#5013688
(Implementing a Digital Signature
Is the BI Publisher installed on your instance of version 10.1.3.4 or higher?
Pls procure a digital signature as soon as possible. The process can take time. OR we could use any certificate that you already might have OR generate a certificate using Oracle Certificate Authority for demo.

Digital Signature in XML Report

Hi Friends,
In Oracle EBS R12, I have a custom XML report developed and running fine.
There is a requirement to add the feature of Digital Signature in the output of this report. Please help me with the detailed steps to achieve this.
PS: I have tried a few links from Google and Article notes from oracle support. But, no success.
If anyone has implemented this successfully, some hints would be of great help.
The XML report is form-16 of employees.
Regards,
Gursangat

Duplicate thread (please post only once).
How to add a digital signature in xml publisher report
How to add a digital signature in xml publisher report

Adding digital signature field with LC Designer vs. LC Digital Signatures

Hi All,
When digital signature field named "SignatureField1" is added to PDF document using LC Designer it appears as "form1[0].#subform[0].SignatureField1[0]" in Adobe Reader signatures tree.
Same field added by LC Digital Signatures service appears as "SignatureField1" in the same tree.
Why? What is the difference between those objects?
LC Digital signatures ES2
Adobe Reader 9.3.0
Thanks, Yan

Yan
First off, there is no difference between the two signature field objects.
I'll do my best to explain why there is a difference in how the signature objects are named in the Signature pane of Reader\Acrobat. When you add the signature field using LC Designer, the object is defined in the underlying XML (XFA) that defines the form. The (SOM expression) you see in Reader (via the signature pane) matches the structure of the form.
When you add a signature field to a form using LiveCycle Digital Signatures ES2, you are appending a signature field "on top" of a PDF form (the underlying XML has been rendered into PDF). The signature field is not defined in the XML, therefore Reader\Acrobat do not display the same naming syntax.
Does this help?
Thanks
Steve

How to add a digital signature in xml publisher report

The problem is: There is a existing pick slip report.This is a xml publisher report and the data source is RDF. We have to add digital signature there. Now this signature is stored in a table with type Long Raw and format BMP. XML Publisher do not support Long Raw and BMP format. It supports BLOB and jpg format.
Could you please guide how to add this signature in the existing RDF with datatype as BLOB and format as jpg.
Please provide the steps with example.

Hi,
Have a look at this thread.
Implementing electronic signatures on an existing AP check run
Re: Implementing electronic signatures on an existing AP check run
Regards,
Hussein

Embedding Documents and Adding Digital Signatures

I have the following two questions regarding Adobe Acrobat XI pdf fillable forms that I can't find in the manual:
Embed supporting documentation and/or copy and paste information within the form
Allow digital signatures to be saved within the electronic version of the form
I would appreciate any feedback available.
Thanks!

Use the Acrobat forum.

Adding Digital Signatures to PDFs

Hi all,
Sorry if I am posting this question in the wrong location, but hopefully someone who sees this message will still be able to answer or point me in the right direction. I did perform a search and could not find a definitive answer.
There are documents in my company that will be circulated for approval and we would like to apply digital signatures to indicate that certain personnel have reviewed these documents. I have Acrobat 3D version 8.1.5 and I know I have the capability with that version to add digital signatures to a PDF. My question is: Is that true of all versions of Acrobat? If not, can anyone tell me the most recent version of Acrobat that has this capability. I won't necessarily be the one creating the PDFs; thus, the question.
Janice

Use the Acrobat forum.

Adding Digital Signature Fields to Multiple Pages in a Document

Hello,
I have a batch processing java script which will place digital signature fields in a drawing.
Sometimes the drawing could have multiple pages and the script needs to place the digital signature fields onto each page.
The problem with the script I have is that the digital signature fields are only appearing on the first page.
Can anyone please provide assistance with modifying my script so that the digital signature fields appear on every page?
// Drawing signature field rev 0
var numpages = this.numPages;
for (var i=0; i < numpages; i++) {
var a = this.addField("Checked", "signature", i, [1783, 174, 1724, 198]);
var b = this.addField("Designed", "signature", i, [1783, 149.5, 1724, 173.5]);
var c = this.addField("Design App", "signature", i, [1783, 125, 1724, 149]);
var d = this.addField("Proj App", "signature", i, [1783, 101, 1724, 125]);
Thanks very much.

Just index the field names:
var numpages = this.numPages;
for (var i=0; i < numpages; i++) {
var a = this.addField("Checked"+i, "signature", i, [1783, 174, 1724, 198]);
var b = this.addField("Designed"+i, "signature", i, [1783, 149.5, 1724, 173.5]);
var c = this.addField("Design App"+i, "signature", i, [1783, 125, 1724, 149]);
var d = this.addField("Proj App"+i, "signature", i, [1783, 101, 1724, 125]);
Tho there's no point in signing each page in the same document, tho I also see engineering folk do this. They just love signing every data sheet.
And the result will not be good. Each signature will cause a problem/alert for the previous signatures.
Care to indicate your engineering company?

Adding Digital Signature in Form 16

Experts,
I want to apply note 1168740 to add digital signature to form 16 . Can anybody tell me how i can get credentials and the corresponding public key. links provided there i.e
http://help.sap.com/saphelp_nw70/helpdata/en/db/ aafb211ead420faeeaa24e99eb5f41/frameset.htm
and
http://help.sap.com/saphelp_nw70/helpdata/EN/46/ 1ca382f3ec5873e10000000a11466f/frameset.htm
is not working.

hi Pradeep,
Go through following link
Re: digital signature
With Regards,
Ravi

Use XML Digital Signature(Apache XML security) with Applet

I have problem when I use xml-security-1_2_1 library from Apache with applet and access denied errors occur.
6 May 2005 10:06:45 org.apache.xml.security.Init init
SEVERE: Bad:
java.security.AccessControlException: access denied (java.util.PropertyPermission org.apache.xml.security.resource.config read)
bla bla....
How should I do ? Please! T_T and thank you ..

An applet cannot read the local file system, connect to any other computer than the one
it came from or read properties it's not supposed to read. And I think it cannot write to any
property.
If you sign the applet or set up a policy for it the applet can do the same as an application
allthough the jre will still check the stack trace if the entire stack has the same privileges
as you signed applet.
http://forum.java.sun.com/thread.jsp?forum=63&thread=524815
second post and last post for the java class file

Hi, I am oracle apps HRMS Technical consultant.I wanted to know ,can we implement Digital Signatures in Oracle apps 11i XML Reports.if yes what is the approach to do so ? Your quick response is appreciated. Regards , Aasma Sayyad.

Hi,
I am Oracle Apps HRMS Technical Consultant.
I wanted to know,if we can implement Digital Signatures in XML Reports for Oracle Apps HRMS 11i Aplication.
If yes,what is the approach to do so.
Your quick response is appreciated.
Regards,
Aasma Sayyad.

Hi Aasma,
The standard BI Publisher is part of EBS applications.
Most of the EBS reports(R12) are based on BI Publisher.
If you check the responsibility 'XML Publisher Administrator' you will see all the templates used in the application.
Your technical team should already know this.
On the other hand OBIEE would need separate licences.
But for you BI Publisher would do.
Cheers,
Vignesh

How to create Web Service Client from wsdl with digital signature?

Please, help me to create Web Service Client from wsdl with digital signature. I know create Web Service client from wsdl file and I know how to add digital signature to XML with jwsdp, but I don't know how to do it together.
Thanks.

I'm handling security wit JAX-WS handler. So I insert "manually" ws-security tag and I encrypt (and sign) message parts.
On client side, all works fine, but on server side I obtain:
---Server Inbound SOAP message---|#]
Decrypting message and rebuilding Valuees... |#]
Starting decrypt|#]
. dectypted.!
--found following string: <ns1:addiziona><num1>80</num1><num2>22222</num2></ns1:addiziona>|#]
...MESSAGE Restored.|#]
<?xml version="1.0" ?><soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:ns1="http://calculator.me.org/" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"><soapenv:Body><ns1:addiziona><num1>80</num1><num2>22222</num2></ns1:addiziona></soapenv:Body></soapenv:Envelope>|#]
Error in decoding SOAP Message
Error in decoding SOAP Message
        at com.sun.xml.ws.encoding.soap.server.SOAPXMLDecoder.toInternalMessage(SOAPXMLDecoder.java:89)
        at com.sun.xml.ws.protocol.soap.server.SOAPMessageDispatcher.toMessageInfo(SOAPMessageDispatcher.java:187)
        at com.sun.xml.ws.protocol.soap.server.SOAPMessageDispatcher$SoapInvoker.invoke(SOAPMessageDispatcher.java:571)
        at com.sun.xml.ws.protocol.soap.server.SOAPMessageDispatcher.receive(SOAPMessageDispatcher.java:145)
        at com.sun.xml.ws.server.Tie.handle(Tie.java:88)
        at com.sun.enterprise.webservice.Ejb3MessageDispatcher.handlePost(Ejb3MessageDispatcher.java:160)
        at com.sun.enterprise.webservice.Ejb3MessageDispatcher.invoke(Ejb3MessageDispatcher.java:89)
        at com.sun.enterprise.webservice.EjbWebServiceServlet.dispatchToEjbEndpoint(EjbWebServiceServlet.java:178)
        at com.sun.enterprise.webservice.EjbWebServiceServlet.service(EjbWebServiceServlet.java:109)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:820)
        at com.sun.enterprise.web.AdHocContextValve.invoke(AdHocContextValve.java:100)
        at org.apache.catalina.core.StandardPipeline.doInvoke(StandardPipeline.java:566)
        at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:536)
        at com.sun.enterprise.web.WebPipeline.invoke(WebPipeline.java:71)
        at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:182)
        at org.apache.catalina.core.StandardPipeline.doInvoke(StandardPipeline.java:566)
        at com.sun.enterprise.web.VirtualServerPipeline.invoke(VirtualServerPipeline.java:120)
        at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:939)
        at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:137)
        at org.apache.catalina.core.StandardPipeline.doInvoke(StandardPipeline.java:566)
        at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:536)
        at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:939)
        at org.apache.coyote.tomcat5.CoyoteAdapter.service(CoyoteAdapter.java:231)
        at com.sun.enterprise.web.connector.grizzly.ProcessorTask.invokeAdapter(ProcessorTask.java:667)
        at com.sun.enterprise.web.connector.grizzly.ProcessorTask.processNonBlocked(ProcessorTask.java:574)
        at com.sun.enterprise.web.connector.grizzly.ProcessorTask.process(ProcessorTask.java:844)
        at com.sun.enterprise.web.connector.grizzly.ReadTask.executeProcessorTask(ReadTask.java:287)
        at com.sun.enterprise.web.connector.grizzly.ReadTask.doTask(ReadTask.java:212)
        at com.sun.enterprise.web.connector.grizzly.TaskBase.run(TaskBase.java:252)
        at com.sun.enterprise.web.connector.grizzly.WorkerThread.run(WorkerThread.java:75)
Caused by: javax.xml.ws.soap.SOAPFaultException: Cannot find the dispatch method
        at com.sun.xml.ws.encoding.soap.SOAPDecoder.raiseFault(SOAPDecoder.java:674)
        at com.sun.xml.ws.encoding.soap.server.SOAPXMLDecoder.decodeDispatchMethod(SOAPXMLDecoder.java:152)
        at com.sun.xml.ws.encoding.soap.SOAPDecoder.decodeBodyContent(SOAPDecoder.java:337)
        at com.sun.xml.ws.encoding.soap.SOAPDecoder.decodeBody(SOAPDecoder.java:327)
        at com.sun.xml.ws.encoding.soap.SOAPDecoder.decodeEnvelope(SOAPDecoder.java:250)
        at com.sun.xml.ws.encoding.soap.server.SOAPXMLDecoder.toInternalMessage(SOAPXMLDecoder.java:81)
        ... 29 more
|#]
--->handleFault O_o<---|#]If you have any idea for solving my problem, then I can post my simple example :(
Bye!

Fillable forms with digital signatures on SharePoint

We have a Document Set content type on SharePoint that contains some fillable PDF forms. Users are filling it out and adding digital signatures. Some users have Acrobat Pro and some have Readers. Once in a while users get the error "The document has been changed since it was created and use of extended features is no longer available." and the form becomes unusable. After reading some forums I learnt that it happens if there is a major change in a PDF file. My users are doing the following: check-out a file from SharePoint, fill some fields, digitally sign and check back in. Does this qualify a major change in a PDF file? Is there any way to fix it or should we simply stop using PDF files for this?

Yes, you should use Acrobat to enable the forms. A form enabled with Forms Central doesn't include the digitial signature usage right, but one enabled with Acrobat Pro does.

How to send a digital signature across sockets ?

i have wriiten java code for client server communication - the client sends a digital signature and the server verifies it using the public key .I have sent the signature as a string from the client to server.although the verification comes as true most of the times , some times it comes as "false" .i dont know why it comes that way .
so my question is ::: is there any problem in sending the digital signature as a string. if so , then how can i send it across sockets ?
i have used the necessary specs [ X509EncodedKeySpec , PKCS8EncodedKeySpec ] to write and read the private , public keys.so i dont think its a problem with the keys .
thank you :)
Edited by: itcoll on Dec 1, 2008 2:43 AM
Edited by: itcoll on Dec 1, 2008 2:54 AM

so my question is ::: is there any problem in sending the digital signature as a string.Depends how you constructed the string, how you sent it, and how you received it. Not knowing any of those things it is impossible to comment further.

Adding Digital Signature to XML strings

Similar Messages

Maybe you are looking for